Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
File: CJu7CaX772E1wtkgvye7YfXC4J0.mft (raw, json)
Hash identifier: QxG80vEA6SECpOAeJw+cSALDwX4SuL0+8Reg7lb8H+c=
Subject key identifier: 5D:98:CB:4A:26:85:B9:BF:28:DF:B2:91:28:DB:E1:F5:21:48:05:63
Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
Certificate issuer: /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Certificate serial: 019EBEED6D530FAD9AF41FA99EAE3B2BC87A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 03:01:31 +0000
Manifest this update: Sat 13 Jun 2026 03:01:31 +0000
Manifest next update: Sun 14 Jun 2026 03:01:31 +0000
Files and hashes: 1: CJu7CaX772E1wtkgvye7YfXC4J0.crl (hash: ww0CpszcWLRqdv6CWFNmXOm0povmjQbaIGghhsPSacs=)
2: OHiJ9XzBUi42gNdFbFSonns_rq0.roa (hash: 5izRR616Szlh4ynpWzSXWkX0E9KgDJBqg2wIQA5yWeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:6d:53:0f:ad:9a:f4:1f:a9:9e:ae:3b:2b:c8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Validity
Not Before: Jun 13 03:01:31 2026 GMT
Not After : Jun 14 03:01:31 2026 GMT
Subject: CN=5d98cb4a2685b9bf28dfb29128dbe1f521480563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a3:dc:7b:7c:36:62:25:5a:11:80:1d:c9:9e:
f0:6f:4b:79:0e:8c:09:71:a6:90:7c:61:6c:58:a9:
a3:fa:f7:9a:26:3e:5d:a7:2a:11:a2:13:2d:84:a2:
2c:ba:a8:b1:ff:63:b4:c3:2a:a3:84:68:bb:98:22:
6b:b4:df:6d:fa:46:7c:16:56:97:1d:d1:31:64:6b:
00:be:28:7b:d3:10:e2:69:04:b5:2e:15:cb:57:05:
58:ea:e5:a4:57:cb:9d:3c:6f:01:dd:f9:24:6f:3a:
f6:9a:d4:6e:c2:75:38:da:6b:2f:ef:db:92:a2:20:
be:02:cc:0e:54:ca:b3:d9:b8:25:47:d3:6e:99:0d:
93:7b:c0:4a:ab:c9:71:94:12:d8:2a:fe:da:f2:46:
a6:d0:c7:9d:e1:64:1b:71:fc:f1:d7:d9:03:55:5f:
12:dd:55:12:b1:8d:b3:57:65:47:25:8f:84:ee:d1:
8d:e8:c5:d1:ce:b1:16:b9:91:4c:3e:3c:a9:cf:38:
a1:a6:ff:ea:84:36:e9:90:30:ba:4e:81:78:7f:f1:
b9:73:a0:2b:cf:e8:63:ca:df:8a:f2:47:9d:8a:d4:
73:22:76:2d:d0:d9:c4:89:9b:e8:b5:bf:b6:4b:c3:
1b:97:96:af:e0:ac:96:59:53:2e:f7:9d:ca:ba:10:
30:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:98:CB:4A:26:85:B9:BF:28:DF:B2:91:28:DB:E1:F5:21:48:05:63
X509v3 Authority Key Identifier:
keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:20:89:92:87:7f:ee:be:b9:9d:e4:33:e8:6e:43:84:38:36:
09:8f:06:1e:9d:8e:44:8b:be:07:e6:83:6f:00:39:62:67:cf:
79:48:35:ab:ed:ec:46:0e:75:1c:ac:e5:b2:bf:21:61:47:42:
17:50:8a:94:03:00:c7:8a:94:1c:d8:9e:91:96:08:9e:2b:47:
e8:11:c9:ef:e0:fd:63:62:b8:c6:98:f3:88:2b:a6:a0:b0:e9:
b4:d5:fd:f3:cb:2c:db:cf:94:4d:7a:a5:40:50:25:c4:39:24:
b8:c9:c8:4f:c8:67:c9:a8:f0:36:fc:99:36:53:e1:4a:43:b8:
35:12:f5:e3:11:07:3b:80:50:8e:72:b1:40:01:a7:fd:a3:90:
09:39:5d:eb:df:15:8c:cc:8c:6a:89:0e:1a:a2:d6:70:4f:73:
53:c3:3c:ef:61:36:8f:da:02:32:de:d0:df:41:8f:5d:83:98:
27:95:6c:e4:ca:b3:24:b0:c0:dd:5f:64:de:c9:0e:2a:69:f3:
fa:70:ad:2c:92:a9:cb:cf:29:47:d7:19:c0:67:a3:80:43:81:
e5:13:d2:e4:59:a4:f2:fd:5a:7b:5e:f4:8e:5f:9a:79:a3:6c:
6b:f9:d3:ff:fa:32:eb:e8:78:5f:12:3c:86:c4:ab:08:d7:3f:
e0:8f:6c:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7W1TD62a9B+pnq47K8h6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4OWJiYjA5YTVmYmVmNjEzNWMyZDkyMGJmMjdiYjYxZjVj
MmUwOWQwHhcNMjYwNjEzMDMwMTMxWhcNMjYwNjE0MDMwMTMxWjAzMTEwLwYDVQQD
Eyg1ZDk4Y2I0YTI2ODViOWJmMjhkZmIyOTEyOGRiZTFmNTIxNDgwNTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qPce3w2YiVaEYAdyZ7wb0t5DowJ
caaQfGFsWKmj+veaJj5dpyoRohMthKIsuqix/2O0wyqjhGi7mCJrtN9t+kZ8FlaX
HdExZGsAvih70xDiaQS1LhXLVwVY6uWkV8udPG8B3fkkbzr2mtRuwnU42msv79uS
oiC+AswOVMqz2bglR9NumQ2Te8BKq8lxlBLYKv7a8kam0Med4WQbcfzx19kDVV8S
3VUSsY2zV2VHJY+E7tGN6MXRzrEWuZFMPjypzzihpv/qhDbpkDC6ToF4f/G5c6Ar
z+hjyt+K8keditRzInYt0NnEiZvotb+2S8Mbl5av4KyWWVMu953KuhAwJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2Yy0omhbm/KN+ykSjb4fUhSAVjMB8GA1UdIwQY
MBaAFAibuwml++9hNcLZIL8nu2H1wuCdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0p1N0NhWDc3MkUxd3RrZ3Z5ZTdZZlhDNEowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC81Y2NiOGYtNTE0OC00NzA2LWEwNDAt
MmY5YjAwZmRjNWQzLzEvQ0p1N0NhWDc3MkUxd3RrZ3Z5ZTdZZlhDNEowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC81Y2NiOGYtNTE0OC00NzA2LWEwNDAtMmY5YjAwZmRjNWQz
LzEvQ0p1N0NhWDc3MkUxd3RrZ3Z5ZTdZZlhDNEowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjCCJkod/
7r65neQz6G5DhDg2CY8GHp2ORIu+B+aDbwA5YmfPeUg1q+3sRg51HKzlsr8hYUdC
F1CKlAMAx4qUHNiekZYInitH6BHJ7+D9Y2K4xpjziCumoLDptNX988ss28+UTXql
QFAlxDkkuMnIT8hnyajwNvyZNlPhSkO4NRL14xEHO4BQjnKxQAGn/aOQCTld698V
jMyMaokOGqLWcE9zU8M872E2j9oCMt7Q30GPXYOYJ5Vs5MqzJLDA3V9k3skOKmnz
+nCtLJKpy88pR9cZwGejgEOB5RPS5Fmk8v1ae170jl+aeaNsa/nT//oy6+h4XxI8
hsSrCNc/4I9sgw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:11:16 2026 by rpki-client